drupal Group invite vulnerabilities

Latest drupal Group invite CVEs

Newest publication first

1. CVE-2026-0944 Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001

   Published 2026-02-04

   Medium·CVSS 5.3 EPSS 0.23%

   Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Group invite allows Forceful Browsing.This issue affects Group invite: from 0.0.0 before 2.3.9, from 3.0.0 before 3.0.4, from 4.0.0 before 4.0.4.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.